adding CNAME back because it turns out to be necessary after all